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Amendmeinits to tine Claims : 

This listing of claims will replace all prior versions, and listings, of claims in 
the application: 

1. (currently amended) A method for controlling network traffic to a 
network computer which provides network computer services, the method comprising: 

measuring capacity of the network computer to service the network traffic to 
obtain a signal; 

providing a set of rule data which represents different policies for servicing the 
network traffic; 

selecting a subset of the rule data based on the signal to obtain a selected subset 
of rule data which represents qualitv of service differentiations : and 

throttling the network traffic to the network computer based on the selected 
subset of the rule data wherein services provided by the network computer are optimized 
without overloading the network computer and wherein the network traffic is throttled so that 
the network computer provides qualitv of service differentiation and to enable automatic 
resource allocation differentiating preferred customers from non-preferred customers . 

2. (original) The method as claimed in claim 1 wherein the network 
computer is a server and wherein the network traffic includes requests for service from 
network clients over the network. 

3 . (original) The method as clauned in claim 2 wherein the network is the 
Internet and the server is an Internet server. 

4. (original) The method as claimed in claim 1 wherein the network traffic 
includes denial of service attacks. 

5. (original) The method as claimed in claim 1 further comprising 
organizing the set of rule data in at least one multi-dimensional coordinate system. 
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6. (original) The method as claimed in claim 5 wherein the capacity of the 
network computer includes load components or load component indices and wherein the 
dimensions of the at least one multi-dimensional coordinate system corresponds to the load 
components or load component indices. 

7. (original) The method as claimed in claim 1 further comprising the step 
of classifying network traffic to the network computer to obtain a plurality of traffic 
classifications and wherein the step of throttling is based on the plurality of traffic 
classifications. 

8. (cancel) 

9. (currently amended) The method as claimed in claim 1 wherein the step 
of throttling prevents substantially all of the network traffic from reaching the network 
computer, 

10. (currently amended) The method as claimed in claim 1 wherein the step 
of throttling allows substantially all of the network traffic to reach the network computer. 

11. (currently amended) A system for controlling network traffic to a 
network computer which provides network computer services, the system comprising: 

a monitor for measuring capacity of the network computer to service the 
network traffic to obtain a signal; 

a storage for storing a set of rule data which represents different policies for 
servicing the network traffic; 

means for selecting a subset of the rule data based on the signal to obtain a 
selected subset of rule data which represents qualitv of service differentiations : and 

a controller for controlling the network traffic to the network computer based 
on the selected subset of the rule data wherein the services provided by the network computer 
are optimized without overloading the network computer and wherein the network traffic is 
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throttled so that the network computer provides quality of service differentiation and to enable 
automatic resource allocation differentiating preferred customers from non-preferred 
customers . 

12. (original) The system as claimed in claim 11 wherein the network 
computer is a server and wherein the network traffic includes requests for service from 
network clients over the network. 

13. (original) The system as claimed in claim 12 wherein the network is the 
Internet and the server is an Internet server. 

14. (original) The system as claimed in claim 1 1 wherein the network traffic 
includes denial of service attacks. 

15. (original) The system as claimed in claim 1 1 wherein the set of rule data 
is stored in at least one multi-dimensional coordinate system. 

16. (original) The system as claimed in claim 15 wherein the capacity of the 
network computer includes local components or local component indices and wherein the 
dimensions of the at least one multi-dimensional coordinate system corresponds to the load 
components or load component indices. 

17. (original) The system as claimed in claim 11 further comprising a 
classifier for classifying network traffic to the network computer to obtain a plurality of traffic 
classifications and wherein the controller controls the network traffic based on the plurality of 
traffic classifications. 

18. (cancel) 
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19. (currently amended) The system as claimed in claim 11 wherein the 
controller prevents substantially all of the network traffic from reaching the network computer. 

20. (currently amended) The system as claimed in claim 11 wherein the 
controller allows substantially all of the network traffic to reach the network computer. 



